Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gjTcAEXPRsxwz9VK19XoNZRcFbM.roa
File: gjTcAEXPRsxwz9VK19XoNZRcFbM.roa (raw, json)
Hash identifier: aRUgjIuzP9YXz/vQKBSfskoNxrWNSE/LLTcY3VjlnLM=
Subject key identifier: 82:34:DC:00:45:CF:46:CC:70:CF:D5:4A:D7:D5:E8:35:94:5C:15:B3
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C26CBD3E9AA1351930EC363995CBB834C
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gjTcAEXPRsxwz9VK19XoNZRcFbM.roa
Signing time: Fri 01 Dec 2023 19:12:21 +0000
ROA not before: Fri 01 Dec 2023 19:12:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:26:cb:d3:e9:aa:13:51:93:0e:c3:63:99:5c:bb:83:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 1 19:12:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8234dc0045cf46cc70cfd54ad7d5e835945c15b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:a8:b1:7a:18:2a:dc:4b:3b:22:79:c0:b2:
54:82:e1:c1:72:69:70:1d:25:73:b4:74:58:24:ae:
bf:e9:a9:89:02:40:52:03:97:45:8d:a7:15:40:d5:
65:17:a0:cf:49:3b:44:89:95:ef:44:af:db:06:23:
db:91:86:ee:97:30:e5:b3:13:79:ac:ee:cb:3f:a6:
cc:69:95:21:13:18:5e:19:74:76:8b:43:c3:0c:16:
86:bd:86:74:a0:20:ce:fd:93:ab:7f:9a:b1:20:36:
26:91:57:cd:63:d9:c7:70:d6:c6:d9:90:4c:9f:18:
a5:64:9b:cb:d5:8b:5b:7b:ab:b5:68:40:e9:0c:23:
85:18:af:12:60:ff:52:17:8f:9c:38:78:ad:54:36:
70:d0:cb:37:d8:4d:5f:89:56:85:b6:8b:cd:42:cc:
e2:a1:a5:8b:12:a0:e4:3a:d4:51:e3:d7:25:2d:a8:
dc:ab:6f:7b:3d:0f:de:04:35:6a:68:1d:0b:9f:eb:
a1:1b:b6:3d:53:17:0c:5c:9f:e5:54:dc:cb:de:a6:
59:28:e7:6d:10:f5:80:56:2a:55:37:26:f3:9b:b2:
f9:97:1b:3c:1c:e1:d2:81:8d:b3:6f:db:d7:2e:77:
68:85:90:36:e0:a0:91:1c:97:05:4e:3c:91:bb:cd:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:34:DC:00:45:CF:46:CC:70:CF:D5:4A:D7:D5:E8:35:94:5C:15:B3
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/gjTcAEXPRsxwz9VK19XoNZRcFbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0c:69:4a:c6:08:99:32:bb:1d:6e:e5:16:11:6e:90:ef:b2:d4:
c5:be:e9:2e:fa:82:df:5f:4f:ac:99:09:ba:de:0b:40:4d:5a:
bc:ab:60:ce:a2:32:c5:12:54:37:7d:7a:79:81:51:12:12:3f:
04:84:82:72:38:90:fa:b2:4f:a9:07:6c:f0:b2:de:cf:10:7c:
3c:7a:49:01:6e:46:2e:fe:80:e1:c6:d3:db:ae:59:18:8d:10:
d4:d0:8a:21:70:f9:67:92:fd:bb:29:b3:27:48:88:2d:3b:81:
4d:de:2e:c9:1a:16:4b:d0:0e:c0:e7:fa:2b:6f:95:3c:a9:6e:
03:70:ea:d2:6b:37:e3:50:2a:be:a6:39:3f:6e:7d:ef:f6:6b:
a1:19:a3:4e:36:48:a1:ec:70:5e:99:ae:0c:ef:c5:b1:20:11:
90:73:87:91:4e:75:5d:90:92:7f:98:c3:e7:21:63:0e:fd:fa:
45:f3:1d:5e:ab:df:34:11:f2:bc:d3:25:e5:75:10:2b:02:84:
b7:e3:fb:a4:7f:88:a1:07:a3:9b:9d:d9:63:dc:73:6f:07:bf:
aa:0a:a9:fb:ae:ee:7d:7a:d6:5f:a2:d3:24:db:63:35:a1:d4:
df:ec:fb:ad:5c:59:46:5e:b4:93:23:9d:7c:cd:a3:46:a7:53:
b5:1f:f7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:56:12 2025 by rpki-client